Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Insecure CaptchaVulnerability Analysis in DVWA (Low to Impossible)
════════════════════════
𐀪 Author: Narathama Firmansyah Putra
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 14:27:37 GMT
════════════════════════
⌗ Tags: #penetration_testing #dvwa #insecure_captcha #cybersecurity #captcha
Medium
Insecure CaptchaVulnerability Analysis in DVWA (Low to Impossible)
Introduction Insecure Captcha adalah salah satu fitur latihan keamanan di Damn Vulnerable Web Application (DVWA) yang menunjukkan bagaimana…
35 views
Daily Writeups
⤷ Title: HTB: Outbound
════════════════════════
𐀪 Author: bluesnow
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 07:42:30 GMT
════════════════════════
⌗ Tags: #roundcube #rce #below #insecure_deserialization #symlink_attack
Medium
HTB: Outbound
| Roundcube | PHP Deserialization | CVE-2025–49113 | 3DES Hash Decryption | Below | Symlink Attack |
29 views
Daily Writeups
⤷ Title: OWASP Top 10: 2025—The Latest in Web Application Security Risks
════════════════════════
𐀪 Author: XCyber
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 17:13:14 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #cybersecurity #insecure_design #web_application_security #sql_injection
Medium
OWASP Top 10: 2025—The Latest in Web Application Security Risks
OWASP Top 10: 2025 — The Latest in Web Application Security Risks
47 views
Daily Writeups
⤷ Title: Critical 10.0 CVSS Flaw in Cisco Secure FMC Hands Hackers Root Access to Enterprise Firewalls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 01:37:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure FMC #CVE_2026_20131 #CVSS 10.0 #firewall security #infosec #Insecure Deserialization #Patch Alert #Remote Code Execution #unauthenticated RCE #Vulnerability
Daily CyberSecurity
Critical 10.0 CVSS Flaw in Cisco Secure FMC Hands Hackers Root Access to Enterprise Firewalls
A critical 10.0 CVSS unauthenticated RCE flaw (CVE-2026-20131) in Cisco Secure FMC allows hackers root access via insecure Java deserialization. Patch now.
29 views
Daily Writeups
⤷ Title: Critical Alert: SAP’s Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:20:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2019_17571 #CVE_2026_27685 #cybersecurity #Enterprise Security #infosec #Insecure Deserialization #Patch Tuesday #Remote Code Execution #SAP Security #Vulnerability
Daily CyberSecurity
Critical Alert: SAP's Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
SAP's latest security update addresses 15 flaws, including critical RCE (CVE-2019-17571) and deserialization (CVE-2026-27685) vulnerabilities. Patch now.
16 views
Daily Writeups
⤷ Title: CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:03:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CRM Security #CVE_2026_34838 #GroupOffice #Guzzle #infosec #Insecure Deserialization #PHP Security #POP Chain #rce #Vulnerability Research #Web Shell
Daily CyberSecurity
CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM
CVE-2026-34838: A critical 10.0 flaw in GroupOffice allows authenticated users to trigger RCE via insecure deserialization. Update to v26.0.12 immediately!
17 views
Daily Writeups
⤷ Title: Unauthenticated RCE via WebLogic WLS-WSAT (CVE-2019–2725)
════════════════════════
𐀪 Author: Sai
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:02:20 GMT
════════════════════════
⌗ Tags: #insecure_deserialization #oracle_weblogic_server #vulnerability #application_security #remote_code_execution
Medium
Unauthenticated RCE via WebLogic WLS-WSAT (CVE-2019–2725)
Overview
10 views
Daily Writeups
⤷ Title: Remote Code Execution via Insecure Deserialization in Wazuh XDR/SIEM (CVE-2026–25769)
════════════════════════
𐀪 Author: Kevin Dicks
════════════════════════
ⴵ Time: Sun, 10 May 2026 22:24:11 GMT
════════════════════════
⌗ Tags: #cve #insecure_deserialization #rce
Medium
Remote Code Execution via Insecure Deserialization in Wazuh XDR/SIEM (CVE-2026–25769)
Abstract
27 views
Daily Writeups
⤷ Title: OWASP Top 10 #4: Insecure Design — When Applications Are Built Insecurely from the Beginning
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Mon, 11 May 2026 12:21:16 GMT
════════════════════════
⌗ Tags: #insecure_design #owasp_top_10 #bug_bounty #vapt #vulnerability_assessment
Medium
OWASP Top 10 #4: Insecure Design — When Applications Are Built Insecurely from the Beginning
Hello, I’m Kanishka Khandelwal, an Application Security Engineer and security researcher focused on web & API security testing, bug bounty…
17 views
Daily Writeups
⤷ Title: Critical TYPO3 Extension Exploit: Content Element Selector Flaw (CVE-2026-46725) Triggers Unauthenticated RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 01:17:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ceselector #Content Element Selector #CVE_2026_46725 #Cyber Security #infosec #Insecure Deserialization #Patch Alert #PHP Object Injection #Remote Code Execution #TYPO3 Extension #TYPO3_EXT_SA_2026_013
Daily CyberSecurity
Critical TYPO3 Extension Exploit: Content Element Selector Flaw (CVE-2026-46725) Triggers Unauthenticated RCE
Urgent: TYPO3 patches a critical 9.2 CVSS flaw (CVE-2026-46725) in Content Element Selector plugin. Unauthenticated attackers can achieve full server RCE.
20 views
Daily Writeups
⤷ Title: [IronHold] — Spring Boot Source Code Analysis: Finding Credentials, SQL Injection, PrivEsc, and…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 05:38:52 GMT
════════════════════════
⌗ Tags: #capture_the_flag #spring_boot #sql_injection #insecure_deserialization #privilege_escalation
Medium
[IronHold] — Spring Boot Source Code Analysis: Finding Credentials, SQL Injection, PrivEsc, and Java Deserialization Exploitation
The source leaked. Read it like an attacker, chain the flaws, and compromise the Spring Boot application.
29 views